A security awareness program is a critical part of any security strategy. It is not enough to simply hold everyone in the organization accountable.
Chief information security officers (CISOs) must first train employees to practice proactive, conscientious security behaviors by convincing them that security affects them directly, not just the business.